Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File:                     1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier:          5D/cY8nzF7cMlSu6Y+UFSBykXJDpTdRFtk+aD40dEz0=
Subject key identifier:   1C:16:9B:AD:5F:5F:91:84:57:FA:32:D6:CA:59:64:9C:A9:3A:CE:B4
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer:       /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial:       0190448BEE4DAB3B816F165828AF5EB6917E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number:          11D6
Signing time:             Sun 23 Jun 2024 10:02:19 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:19 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:19 +0000
Files and hashes:         1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: rsZ4S/9g8OvpjIFbKPKVTqIcrSCrt6xEYyviA8EgPdY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:ee:4d:ab:3b:81:6f:16:58:28:af:5e:b6:91:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
        Validity
            Not Before: Jun 23 10:02:19 2024 GMT
            Not After : Jun 24 10:02:19 2024 GMT
        Subject: CN=1c169bad5f5f918457fa32d6ca59649ca93aceb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:0c:ff:cb:72:c2:27:7f:d7:ab:31:9b:6d:
                    dc:e2:51:3f:95:14:2b:43:43:d4:26:0a:fd:87:93:
                    55:68:2e:3a:3c:e0:74:7e:74:6d:bd:80:f1:0c:a3:
                    13:ef:33:00:2e:7c:9e:37:4e:47:66:6f:76:d2:bc:
                    e5:22:2a:08:a8:98:f5:17:4a:26:fe:eb:4b:6d:41:
                    9d:3f:57:9b:f5:de:e4:43:6e:fe:8a:61:51:1f:cb:
                    f4:25:2e:95:d3:33:b1:ba:a3:cb:f4:41:fa:b3:72:
                    7e:01:4d:ae:16:68:8e:00:e3:5a:7b:5b:d2:40:30:
                    83:5f:f2:18:29:36:4d:82:a9:4b:86:f8:dc:a1:ad:
                    48:05:4c:5c:23:dc:71:26:aa:c8:01:04:cd:29:b7:
                    b7:b5:18:5c:95:01:9f:bd:37:7d:fc:54:e0:e8:01:
                    3d:e3:4d:97:49:b9:37:6e:ff:b6:12:2e:d0:6c:b8:
                    f5:60:0b:9c:ec:9a:25:be:bb:7c:70:ce:3e:8b:ad:
                    32:ac:15:fa:e3:36:fa:25:1f:9d:bc:15:63:9c:84:
                    9a:0b:76:c4:f0:0a:52:94:ae:9f:2d:5b:ce:5a:3a:
                    45:b1:ec:cc:bd:ee:6d:b7:c9:f6:4d:2a:94:e9:c6:
                    25:f9:82:f6:31:28:a9:d2:71:5f:84:65:4d:b1:3d:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:16:9B:AD:5F:5F:91:84:57:FA:32:D6:CA:59:64:9C:A9:3A:CE:B4
            X509v3 Authority Key Identifier:
                keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:a0:97:9a:28:0f:a2:63:ba:20:91:8a:3e:fe:34:7b:16:
         0e:ba:29:ae:c4:fb:e3:b3:70:1a:4f:df:bf:ee:42:f2:cc:45:
         69:88:32:f0:cf:08:f1:4d:a6:58:56:a7:74:be:20:04:f7:bc:
         bc:70:28:cb:f2:1b:1b:36:fd:c8:a8:55:f5:7a:17:7c:c1:2a:
         da:d6:35:d9:75:71:09:2b:77:f4:98:26:34:1f:32:43:3f:f6:
         8d:89:1a:dd:43:ec:1c:85:89:ac:a8:20:62:83:de:fe:0a:22:
         58:3f:79:c9:8c:21:51:a2:fd:be:47:3c:e2:3b:16:8c:e2:4c:
         33:cf:bd:ac:c8:56:9b:43:53:f7:60:73:f4:d4:9c:77:2a:6a:
         03:8f:58:49:55:c3:21:ec:10:fb:21:cd:b5:1b:72:c9:47:1c:
         19:71:de:f2:ef:7e:85:68:b6:98:38:76:2a:54:aa:44:96:8d:
         89:2c:35:19:26:5d:51:b8:af:e2:01:48:18:14:eb:e7:26:f2:
         d2:39:69:24:ad:97:10:c0:2d:d8:84:17:51:ae:ad:c5:0a:08:
         af:10:be:35:44:57:06:01:c4:71:ec:c8:15:e4:e8:a0:e3:d3:
         96:41:9a:ec:e2:2b:4a:0e:ce:ae:46:b3:0f:27:99:bb:1f:9e:
         27:3d:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:02 2024 by rpki-client on console-ams.rpki-client.org